Skip to content
OpenAdvisories
Unscored RHSA-2010:0520 2 CVEs

Red Hat Security Advisory: libtiff security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as libtiff 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::as libtiff-debuginfo 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::as libtiff-devel 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::desktop libtiff 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::desktop libtiff-debuginfo 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::desktop libtiff-devel 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::es libtiff 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::es libtiff-debuginfo 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::es libtiff-devel 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::ws libtiff 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::ws libtiff-debuginfo 0:3.5.7-34.el3
Red Hat · RHEL 3 enterprise_linux:3::ws libtiff-devel 0:3.5.7-34.el3

Vulnerabilities 2

  • Unscored —
    CVE-2010-1411 Public exploit EPSS 13%

    Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as…

    tiff Debian
  • Unscored —
    CVE-2010-2598

    LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data …

    tiff Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=592361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=610786
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0520.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-1411
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1411
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1411
  • report
    https://access.redhat.com/security/cve/CVE-2010-2598
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2598
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2598